Alcatel-Lucent IAP93 Betriebsanweisung PDF herunterladen (Seite 221)

AOS-W Instant 6.3.1.1-4.0 | User Guide Intrusion Detection | 221

Chapter 19

Intrusion Detection

The Intrusion Detection System (IDS) is a feature that monitors the network for the presence of unauthorized OAW-

IAPs and clients. It also logs information about the unauthorized OAW-IAPs and clients, and generates reports

based on the logged information.

The IDS feature in the AOS-W Instant network enables you to detect rogue APs, interfering APs, and other devices

that can potentially disrupt network operations.

This chapter describes the following procedures:

l Detecting and Classifying Rogue APs on page 221

l OS Fingerprinting on page 221

l Configuring Wireless Intrusion Protection and Detection Levels on page 222

l Configuring IDSUsing CLI on page 226

Detecting and Classifying Rogue APs

A rogue AP is an unauthorized AP plugged into the wired side of the network.

An interfering AP is an AP seen in the RF environment but is not connected to the wired network. While the

interfering AP can potentially cause RF interference, it is not considered a direct security threat, because it is not

connected to the wired network. However, an interfering AP may be reclassified as a rogue AP.

To detect the rogue APs, click the IDS link in the AOS-W Instant main window. The built-in IDS scans for access

points that are not controlled by the Virtual Controller. These are listed and classified as either Interfering or Rogue,

depending on whether they are on a foreign network or your network.

Figure 72 Intrusion Detection

OS Fingerprinting

The OS Fingerprinting feature gathers information about the client that is connected to the AOS-W Instant network to

find the operating system that the client is running on. The following is a list of advantages of this feature:

l Identifying rogue clients— Helps to identify clients that are running on forbidden operating systems.

l Identifying outdated operating systems— Helps to locate outdated and unexpected OS in the company network.

l Locating and patching vulnerable operating systems— Assists in locating and patching specific operating system

versions on the network that have known vulnerabilities, thereby securing the company network.

OS Fingerprinting is enabled in the AOS-W Instant network by default. The following operating systems are

identified by AOS-W Instant:

l Windows 7

l Windows Vista

1 2 ... 216 217 218 219 220 221 222 223 224 225 226 ... 334 335

Keine Kommentare

Alcatel-Lucent IAP93 Betriebsanweisung Seite 221